Skip to content
#

blueteam

Here are 112 public repositories matching this topic...

ethack
ethack commented Dec 14, 2020

So instead of having to do rita import --config etc/rita.yaml ... we would do rita --config etc/rita.yaml import .... This makes it easier to modify most commands since --config is less likely to change than the rita subcommand. It also makes it possible to create aliases like:

  • alias rita1=rita --config /etc/rita/config1.yaml
  • alias rita2=rita --config /etc/rita/config2.yaml

Wher

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.

  • Updated Aug 4, 2018
  • Python

Improve this page

Add a description, image, and links to the blueteam topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the blueteam topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.